Privacy policy.

Last updated: October 8, 2026

Bodywork by James respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how personal information is collected, used, and protected when you visit the Bodywork by James website, contact James, book a session, or receive bodywork services.

Bodywork by James operates in Portugal and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Portuguese data-protection law.

1. Who is responsible for your personal data?

The data controller responsible for your personal data is:

Bodywork by James
Owner: James Farren Hickey
Location: Rua Santo Antonio 8B, Casal Frades - Santa Cruz, Tomar, Portugal 2300-418
Email: info@bodyworkbyjames.com

For privacy-related questions or requests concerning your personal data, please contact me using the email address above.

2. What personal information may I collect?

Depending on how you interact with Bodywork by James, I may collect:

Information you provide directly

This may include:

  • your name

  • email address

  • telephone number

  • booking information

  • appointment history

  • information you provide when contacting me

  • preferences relating to your sessions

  • information you provide about areas you would like addressed or avoided during a session

  • other information you voluntarily provide when arranging or receiving bodywork

Information relating to your wellbeing

Before or during a session, you may choose to tell me about injuries, physical conditions, medications, pregnancy, or other health-related circumstances that may be relevant to receiving bodywork safely.

Health information is treated as particularly sensitive personal data under the GDPR. I only ask for or use information that is relevant to providing an appropriate and safe service, and I do not use it for unrelated purposes.

Where the processing of health information requires a specific legal basis under applicable data-protection law, I will rely on the appropriate basis, including explicit consent where required.

You are not required to provide information that is not necessary for your booking or session. However, if relevant information is withheld, I may be unable to determine whether a session is appropriate or safe to provide.

3. How do I use your information?

I may use your personal information to:

  • respond to enquiries

  • arrange and manage appointments

  • provide bodywork sessions

  • communicate with you about an existing appointment

  • send appointment confirmations, reminders or other necessary booking communications

  • maintain appropriate client and appointment records

  • process payments where applicable

  • manage cancellations and rescheduling

  • respond to questions or requests

  • meet legal, accounting and administrative obligations

  • protect the security of the website, booking system and business

  • improve the services and client experience I provide

I will not use your personal information for purposes that are incompatible with those described in this Privacy Policy.

4. What is the legal basis for processing?

The legal basis depends on what I am doing with your information.

Depending on the circumstances, personal data may be processed because:

  • it is necessary to take steps at your request before providing a service;

  • it is necessary to perform the agreement between you and Bodywork by James;

  • I have a legitimate interest in operating, securing and improving the practice, provided that this does not override your rights and interests;

  • processing is necessary to comply with a legal obligation; or

  • you have given consent where consent is the appropriate legal basis.

Consent is not automatically the legal basis for every use of personal information. Where another lawful basis applies, I will use that basis instead. Where consent is relied upon, it must be freely given, specific, informed and unambiguous, and you may withdraw it.

5. Booking through Fresha

Appointments may be booked and managed through Fresha, which provides the online booking and appointment-management system used by Bodywork by James.

When you make a booking through Fresha, information you provide may be processed by Fresha in accordance with its own privacy policy and terms.

This may include information such as your name, contact details, appointment details and information necessary to manage your booking.

Fresha may also send appointment confirmations, reminders and other communications associated with your booking.

For information about how Fresha processes personal data, please refer to Fresha's current privacy documentation.

6. Website hosting and other service providers

The Bodywork by James website may use third-party providers to provide services such as:

  • website hosting

  • website functionality

  • online booking

  • payment processing

  • email

  • analytics

  • security

  • embedded content or social-media functionality

These providers may process personal information on behalf of Bodywork by James or independently as controllers, depending on the service involved.

I only use third-party services that are reasonably necessary for operating the website and practice, and I take reasonable steps to ensure that personal data is handled appropriately.

The specific third-party services used by the website may change over time.

7. Cookies and similar technologies

The website may use cookies and similar technologies.

Some cookies are necessary for the website to function properly. Other cookies may be used for purposes such as remembering preferences, understanding how visitors use the website, or providing embedded third-party functionality.

Where applicable, non-essential cookies will only be used in accordance with applicable law and any consent requirements.

You can also control cookies through your browser settings.

Because the exact cookies used by a website depend on its configuration and third-party services, the cookie information presented on this website may be updated when the website or its services change.

8. Analytics

If analytics services are used on the Bodywork by James website, they may collect information about how visitors use the website, such as pages visited, approximate location, device or browser information and technical information about the visit.

Analytics will only be used in accordance with applicable data-protection and cookie requirements.

If the website does not use analytics, this section will not apply.

9. Marketing communications

Bodywork by James may occasionally send marketing communications about the practice, new availability, relevant services or other information if you have agreed to receive them or where another lawful basis permits such communication.

You can unsubscribe from marketing communications at any time.

I will not sell your personal information to third parties.

10. How long is your information kept?

I retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including where necessary to:

  • provide and administer your sessions;

  • maintain appropriate business records;

  • meet accounting, tax or other legal requirements;

  • resolve disputes; or

  • establish, exercise or defend legal claims.

Different types of information may therefore be retained for different periods.

Information that is no longer required will be securely deleted or otherwise disposed of, subject to any legal obligation requiring its retention.

11. Who may receive your information?

Your personal information may be accessible to third parties where this is necessary to operate the practice.

Depending on the services actually used, these may include:

  • Fresha, for booking and appointment management;

  • website and hosting providers;

  • payment-service providers;

  • email or communications providers;

  • accounting or professional-service providers;

  • technical or security providers;

  • public authorities where disclosure is required by law.

I do not sell or rent your personal information.

12. International transfers

Some third-party service providers used by the website or booking system may process personal information outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, appropriate safeguards will be used where required by the GDPR, such as an adequacy decision or appropriate contractual safeguards.

Information about relevant international transfers may also be available in the privacy policies of the third-party providers concerned.

13. Your rights

Under applicable data-protection law, you may have the right to:

  • request access to the personal information I hold about you;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal information where there is no lawful reason for me to continue processing it;

  • request restriction of processing in certain circumstances;

  • object to certain processing;

  • request portability of information where the right applies;

  • withdraw consent where processing is based on consent; and

  • complain to the relevant data-protection supervisory authority.

These rights are subject to certain legal exceptions and conditions.

You can contact me at [EMAIL ADDRESS] to exercise your rights.

I may need to verify your identity before responding to a request.

The GDPR requires organisations to provide individuals with information about their processing and their rights in a clear and accessible way.

14. Right to complain

If you have concerns about how your personal data is being handled, I encourage you to contact me first so that I can try to resolve the issue.

You also have the right to lodge a complaint with the Portuguese data-protection supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
Rua de São Bento, n.º 148-3.º
1200-821 Lisboa
Portugal
Website: www.cnpd.pt

The CNPD is the Portuguese supervisory authority responsible for data protection.

15. Security

I take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no website, online booking system or electronic transmission can be guaranteed to be completely secure.

16. Children's privacy

Bodywork by James is intended for adults.

I do not knowingly collect personal information from children through this website.

If you believe that a child has provided personal information through the website without appropriate authorisation, please contact me.

17. Links to other websites

The website may contain links to third-party websites or services, including booking, social-media or other external services.

Once you leave the Bodywork by James website, those websites are governed by their own privacy policies and terms. Bodywork by James is not responsible for the privacy practices of third-party websites.

18. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to the practice, website, booking systems, legal requirements or the services used by Bodywork by James.

The current version will always be published on this website, together with the date on which it was last updated.

19. Contact

If you have any questions about this Privacy Policy or how your personal information is handled, please contact:

James Farren Hickey
Bodywork by James
info@bodyworkbyjames.com

Last updated: October 8, 2026